Vulnerability Description
In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow. This affects the Linux kernel 4.9-stable tree, 4.12-stable tree, 3.18-stable tree, and 4.4-stable tree.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 3.18, < 3.18.64 |
| Canonical | Ubuntu Linux | 12.04 |
Related Weaknesses (CWE)
References
- http://www.openwall.com/lists/oss-security/2020/02/11/1Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/11/2Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/14/4Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/100251Third Party AdvisoryVDB Entry
- https://patchwork.kernel.org/patch/9880041/PatchVendor Advisory
- https://usn.ubuntu.com/3620-1/Third Party Advisory
- https://usn.ubuntu.com/3620-2/Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/11/1Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/11/2Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/14/4Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/100251Third Party AdvisoryVDB Entry
- https://patchwork.kernel.org/patch/9880041/PatchVendor Advisory
- https://usn.ubuntu.com/3620-1/Third Party Advisory
- https://usn.ubuntu.com/3620-2/Third Party Advisory
FAQ
What is CVE-2017-12762?
CVE-2017-12762 is a vulnerability with a CVSS score of 9.8 (CRITICAL). In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow. This affects the Linux k...
How severe is CVE-2017-12762?
CVE-2017-12762 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2017-12762?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Canonical Ubuntu Linux.